111 application security jobs at 62 companies in Pennsylvania

2mo
Save
Mark Applied
Hide
Application Security Engineer
Harrisburg, Pennsylvania, United States
OnsiteFull Time
D&H Distributing
D&H Distributing: Distributes technology products and IT solutions to resellers.
3+ YOEDesigns and implements secure software practices; assesses application security; supports SDLC; proficient in at least one programming language; familiar with OWASP Top 10; experience with security assessments and vendor security.
OWASP, OAUTH, ADFS, PowerShell, Python, Perl, Java, .NET, C#, SIEM, Security
1mo
Save
Mark Applied
Hide
Application Security Engineer
Pittsburgh, Pennsylvania, United States
$110k-$120k/yr OnsiteFull Time
The Wolfe Companies
The Wolfe Companies: Provides comprehensive gift card management and fintech gifting solutions.
2+ YOE2+ years in application security/DevSecOps or software development with security exposure; coding background; CI/CD and secure-coding knowledge; bachelor\u0002s degree in related field (or equivalent experience).
Snyk, SemGrep, Cycode, GitHub, GitLab, Jenkins, AWS DevOps, OWASP, SANS CWE Top 25, DSOMM, BSIMM, AI/ML, LLM
3w
Save
Mark Applied
Hide
Senior Application Security Architect
Quincy or Princeton or Berwyn or Clifton or Austin
$120k-$203k/yr HybridFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
14+ YOEDesign and review secure architectures for applications, APIs, cloud-native and AI systems; conduct threat modeling and risk assessments; embed secure-by-design, DevSecOps, and AI security practices.
Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Kubernetes, CI/CD, DevSecOps, Infrastructure as Code (IaC), SAST, DAST, IAST, software composition analysis (SCA), OWASP Top 10
2w
Save
Mark Applied
Hide
IT Application Security Analyst
Bethlehem, Pennsylvania, United States
OnsiteFull Time
Scandinavian Tobacco Group
Scandinavian Tobacco GroupNasdaq Copenhagen: STG: Manufactures and sells premium cigars and pipe tobac products globally.
3+ YOE3+ years application security or secure software engineering experience; hands-on SDLC/secure-development frameworks, SAST/DAST/SCA tool integration, knowledge of PCI DSS and privacy regs, strong communication.
SAST, DAST, SCA, Snyk, Checkmarx, CI/CD, Vault, Azure Key Vault, NIST SSDF, OWASP ASVS, OWASP Top 10
1mo
Save
Mark Applied
Hide
Application Security Engineer
Pennsylvania or Ohio
$126k-$173k/yr RemoteFull Time
Solventum
SolventumNYSE: SOLV: Provides medical technology and health information software solutions.
7+ YOEBachelor's degree with 7+ years in application security, 3+ years administering DAST tools, experience with AWS/Azure, RESTful API testing (Postman/Swagger), Python scripting, and ability to obtain Public Trust clearance.
DAST, Python, AWS, Azure, Postman, Swagger, Qualys, Tenable, OWASP Top 10, NIST 800-53, FedRAMP, HITRUST, SOC II, GDPR
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
San Francisco or New York City or Pittsburgh
$228k-$290k/yr HybridFull Time
Abridge
Abridge: Automates medical documentation through AI-powered speech analysis
10+ YOE10+ years in application security, expertise in threat modeling, secure code review, vulnerability management, incident response, programming (Python, NextJS), cloud security (GCP), Kubernetes, and AI/ML security; strong communication and leadership skills.
Python, NextJS, GCP, Kubernetes
3d
Save
Mark Applied
Hide
Senior Application Security Engineer
Malvern or Charlotte or Dallas or Fort Worth
HybridFull Time
Vanguard
Vanguard: Provides mutual funds, ETFs, and investment management services.
Undergraduate degree or equivalent; strong experience with DAST and CI/CD integration; familiarity with SAST, SCA, IAST, RASP, secure SDLC, and standards such as NIST, OWASP, MITRE.
DAST, SAST, SCA, IAST, RASP, CI/CD, NIST, OWASP, MITRE
1w
Save
Mark Applied
Hide
Security Specialist - Application Security
Pittsburgh or Phoenix or Lakewood or Birmingham or Strongsville or Farmers Branch
$91k-$186k/yr OnsiteFull Time
PNC Financial Services
PNC Financial ServicesNYSE: PNC: Provides banking, lending, and investment services to customers.
5+ YOEHands-on application security experience including threat modeling, remediation guidance for OWASP/API vulnerabilities, secure design/authentication, SAST/DAST/RASP and CI/CD knowledge; 5+ years' experience typically expected; strong communication skills.
OWASP, API Security, SAST, DAST, RASP, CI/CD, SD Elements, BSIMM, SAMM, AWS, Azure, GCP, Scrum, Kanban
3mo
Save
Mark Applied
Hide
Application Security Engineer (REMOTE) (Anytown, PA, US, 19605)
Anytown, Pennsylvania, United States
$117k-$147k/yr RemoteFull Time
EnerSys
EnerSysNYSE: ENS: Global provider of industrial batteries and stored energy solutions.
5+ YOE5+ years in information security with 3+ years in application security, secure development, or DevSecOps; strong knowledge of OWASP and secure SDLC; hands-on with security testing tools; cloud security experience; ability to collaborate across teams.
Burp Suite, Fortify, Checkmarx, Veracode, ZAP, SAST, DAST, SCA, IaC scanning, Container security
1w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
3w
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
NinjaTrader
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
1mo
Save
Mark Applied
Hide
Workday Application Security & Controls Manager
Atlanta or Tampa or Charlotte or Austin or Chicago or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or California or Philadelphia or Houston
$99k-$232k/yr OnsiteFull Time
PwC
PwC: Providing audit, tax, and management consulting services to businesses.
4+ YOEBachelor's degree, 4+ years of experience, strong Workday application security and compliance skills, analytical thinking, leadership and mentoring experience; SAP experience noted as a specialism.
Workday, SAP
1mo
Save
Mark Applied
Hide
Application Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)
Virginia or Maryland or Pennsylvania or North Carolina or Delaware or New Jersey or District of Columbia or United States
RemoteFull Time
GuidePoint Security
GuidePoint Security: Provides cybersecurity consulting, managed services, and integrated technology solutions.
5+ YOE5+ years security engineering experience, proficiency with SAST tools, CI/CD integration, software engineering background, scripting/automation skills, application security fundamentals (OWASP Top 10, threat modeling), strong communication.
Semgrep, Snyk, CodeQL, Checkmarx, Veracode, GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, IAST, DAST, SCA, NoName, Traceable, Salt, Cequence, Burp Suite, OWASP Top 10, Greenhouse Software, Zoom Scheduler
1mo
Save
Mark Applied
Hide
AI-Application Developer B
Philadelphia, Pennsylvania, United States
$62k-$75k/yr OnsiteFull Time
University of Pennsylvania
University of Pennsylvania: Provides Ivy League higher education and conducts advanced scientific research.
1+ YOEBachelor's degree and 1–2 years experience (or equivalent), develops and maintains application software and interfaces, provides application support, ensures data integrity and security, may manage small projects.
1mo
Save
Mark Applied
Hide
AI-Application Developer B
Philadelphia, Pennsylvania, United States
$62k-$75k/yr OnsiteFull Time
University of Pennsylvania
University of Pennsylvania: Research university offering higher education and healthcare services.
1+ YOEBachelor's degree and 1–2 years experience; develops and maintains application software, translates requirements into technical solutions, administers applications, ensures data integrity/security, and may manage small projects.
1w
Save
Mark Applied
Hide
Cloud Application Support
Pennsylvania or United States
$65k-$92k/yr RemoteFull Time
Gainwell Technologies
Gainwell Technologies: Delivers technology solutions for public health and Medicaid programs.
6+ YOE6+ years in IT support/operations; AWS/Azure cloud, SSL and firewall maintenance, disaster recovery, security/incident management, application/database support, .NET C# experience.
Azure, AWS, SSL, .NET C#, InRule, Appian, SSRS, SSIS
1mo
Save
Mark Applied
Hide
Senior Application Engineer I
Middletown, Pennsylvania, United States
HybridFull Time
Phoenix Contact
Phoenix Contact: Produces components for electrical engineering and industrial automation.
7+ YOEBachelor's in engineering, 7+ years application or network engineering experience, deep Industrial Ethernet and network architecture knowledge, IEC/ISA 62443 familiarity, relevant networking/security certifications preferred, willingness to travel up to 30%.
Industrial Ethernet, IDS/IPS, next-generation firewalls, log collection, SCADA systems, CRM, cloud platforms, IEC/ISA 62443, IEC 61850
1mo
Save
Mark Applied
Hide
Information Security – Risk & Compliance Analyst
Easton or United States or Europe or Asia
HybridFull Time
Victaulic
Victaulic: Manufacturer of mechanical pipe joining and flow control systems.
0+ YOE0–2 years in information security, IT audit, or risk; familiarity with NIST CSF, ISO/IEC 27001, CMMC, and NIS2; experience with risk assessments, third-party audits, cloud/DevOps/application security; CompTIA Security+ or equivalent; CISA preferred.
NIST CSF, ISO/IEC 27001, CMMC, NIS2 Directive, cloud computing, DevOps, application security, GRC platform
2mo
Save
Mark Applied
Hide
ERP Epicor Application Specialist
Lancaster, Pennsylvania, United States
$75k-$80k/yr OnsiteFull Time
Ecore International
Ecore International: Transforms reclaimed rubber into high-performance flooring and surfacing products.
3+ YOE3+ years ERP or application support; Epicor ERP preferred; associate degree required; strong SQL/ERP customization; BAQs, BPMs, dashboards; IT security knowledge.
BAQs, BPMs, dashboards, ERP customization, SQL, MS SQL Server, SSRS, Crystal Reports, C#, Java, PowerShell, Microsoft 365, Azure, Visual Studio
5d
Save
Mark Applied
Hide
.Net Application Developer
Philadelphia, Pennsylvania, United States
$95k-$102k/yr OnsiteFull Time
PMHCC
PMHCC: Provides administrative and management services for public behavioral health programs.
3+ YOE3+ years .NET development experience; proficiency with C#, ASP.NET Core/MVC/Web API, Microsoft SQL Server, secure coding and HIPAA compliance; strong communication and problem-solving skills.
C#, ASP.NET Core, Razor Pages, MVC, Web API, HTML, CSS, JavaScript, Microsoft SQL Server, Git, Azure DevOps, Azure Boards, ASP.NET Core Identity, Azure AD (Entra ID), RESTful APIs